A vulnerability has been discovered in H264WebCam, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL pointer dereference error when parsing GET requests received by the embedded web interface and can be exploited to crash the application.

The vulnerability is confirmed in version 3.7. Other versions may also be affected.

Solution
Restrict access to the web service.

Provided and/or discovered by
fl0 fl0w

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.exploit-db.com/exploits/13920/

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers